Tuesday

24th Oct 2017

Analysis

What does the death of the EU data directive mean?

The EU's data retention directive was agreed in 2006, in the wake of terrorist attacks in Madrid and London in 2004 and 2005 respectively, as governments attempted to tighten national security rules.

Under the regime, telecoms companies were required to retain phone and email data for at least six months and up to two years (according to national law), for possible use in investigating and prosecuting terrorist and other serious crimes.

Thank you for reading EUobserver!

Subscribe now for a 30 day free trial.

  1. €150 per year
  2. or €15 per month
  3. Cancel anytime

EUobserver is an independent, not-for-profit news organization that publishes daily news reports, analysis, and investigations from Brussels and the EU member states. We are an indispensable news source for anyone who wants to know what is going on in the EU.

We are mainly funded by advertising and subscription revenues. As advertising revenues are falling fast, we depend on subscription revenues to support our journalism.

For group, corporate or student subscriptions, please contact us. See also our full Terms of Use.

If you already have an account click here to login.

  • The ruling by the European Court of Justice leaves rules on data retention in a state of limbo (Photo: Lee Morley)

26 of the EU's 28 member countries have applied the regime into their own national legal framework. Germany and Belgium did not.

Why does the Court say it is illegal?

Digital Rights Ireland launched a court action in 2012 against the transposition of the directive, as did 11,130 Austrian rights campaigners, both of which were referred to the EU's top court, the European Court of Justice. In its ruling yesterday (8 April) the ECJ found that the directive was in breach of the right to respect for private life and the fundamental right to the protection of personal data.

"By requiring the retention of those data and by allowing the competent national authorities to access those data, the directive interferes in a particularly serious manner with the fundamental rights to respect for private life and to the protection of personal data," the court in Luxembourg ruled.

But the Court did not rule that data retention itself is illegal, rather that the requirements in the EU legislation were excessive.

"The Court is of the opinion that, by adopting the Data Retention Directive, the EU legislature has exceeded the limits imposed by compliance with the principle of proportionality."

The judgement should not come as that much of a surprise, since it is in line with an opinion published in December by the ECJ's advocate general Pedro Cruz Villalon, which recommended the directive be overturned. Cruz Villalon also stated that the directive breached the Charter of Fundamental Rights.

What does it mean?

The ruling means that, in legal terms, the directive is null and void. There is no EU legislation on data retention.

"We are going back as if it never existed," a Commission source told EUobserver.

EU home affairs commissioner, Cecilia Malmstroem, said that the ruling brought "clarity and confirms the critical conclusions in terms of proportionality of the Commission's evaluation report of 2011" on the implementation of the directive.

Does that mean that the 26 national laws are invalid?

No, they will remain in place. The Court ruling does not immediately affect the rights of an EU government to demand that telecoms firms retain phone and email data.

National governments could face a flood of legal challenges against their own laws from citizens claiming breaches of privacy. But claimants would have to prove that the national laws were in breach of the Charter, which applies to all EU and national law across the bloc.

Governments face two options: to keep to their existing laws and wait for possible legal actions; or to re-write their national laws.

Meanwhile, telecoms companies could also press legal challenges relating to the length of time they are expected to retain data for under national law.

What happens next?

The European Commission was not eager to defend the legislation following the ECJ ruling.

"We all know this is not Malmstroem's favourite directive," a Commission source told EUobserver, adding that the bill had been drafted in response to "a very specific situation . . . and it was clearly done in a hurry".

Commission officials have indicated that the EU's executive arm will take "several months" to assess the impact of the judgement and will scrap its plans to modify the directive.

"There are now no EU rules on data retention . . . so our plan to revise it cannot happen any more," one official told this website. Instead, the Commission is likely to table a new legislative proposal. However, this will not be proposed to MEPs and ministers until after the European elections in May.

But since the Court did not conclude that data retention itself is illegitimate, a future EU law is likely to focus on striking a better balance between the right to privacy and data protection and national security. This will probably mean reduced retention periods and tighter restrictions on government and third party access to data.

What about the countries who refused to implement the directive?

The European Commission had begun infringement proceedings against Belgium and Germany over their refusal to implement the directive. In Germany's case, the EU executive had recommended that it be fined more than €300,000 per day that it had failed to apply the legislation.

The Court ruling does not automatically void these proceedings, but officials have indicated that the 28 commissioners will discuss the end of the two legal actions at their next meeting.

EU court scraps data surveillance law

The EU court has struck down a law on internet and phone surveillance, saying loose wording opens the door to untoward snooping.

MEPs want to scrap US data agreements

Frustrated MEPs want the EU to scrap data protection agreements with the US as they mount pressure on the member states to start negotiations on the EU data protection reforms.

Opinion

Interpol needs EU help to stop abuse

The international police agency needs powerful actors to support its work and its reforms, and the EU can and should provide a positive influence.

Catalan MPs weigh independence declaration

A crucial week is ahead in Catalonia as its leaders decide whether to declare independence - an illegal move according to the Spanish government – or yield to pressure from Madrid.

Catalan MPs weigh independence declaration

A crucial week is ahead in Catalonia as its leaders decide whether to declare independence - an illegal move according to the Spanish government – or yield to pressure from Madrid.

News in Brief

  1. May: EU member states will not lose out with Brexit
  2. Slovakia pledges to be 'pro-European' oasis in region
  3. Report: Catalan leader to address Spanish senate
  4. Fiat-Chrysler 'obstructed justice' reports Le Monde
  5. EU presidency 'confident' on posted workers agreement
  6. Young conservatives boot out Erdogan's party
  7. Tsipras urged to let refugees go before winter sets in
  8. Thousands demand justice in Malta

Stakeholders' Highlights

  1. Martens CentreI Say Europe, You Say...? Interview With EU Commission VP Jyrki Katainen
  2. Mission of China to the EUPresident Xi Jinping Proposes Stronger Global Security Governance at Interpol Assembly
  3. European Friends of ArmeniaEU Engagement Could Contribute to Lasting Peace in Nagorno-Karabakh
  4. UNICEFViolence in Myanmar Driving 12,000 Rohingya Refugee Children Into Bangladesh Every Week
  5. European Jewish CongressBulgaria Applauded for Adopting the Working Definition of Antisemitism
  6. EU2017EENorth Korea Leaves Europe No Choice, Says Estonian Foreign Minister Sven Mikser
  7. Mission of China to the EUZhang Ming Appointed New Ambassador of the Mission of China to the EU
  8. International Partnership for Human RightsEU Should Seek Concrete Commitments From Azerbaijan at Human Rights Dialogue
  9. European Jewish CongressEJC Calls for New Austrian Government to Exclude Extremist Freedom Party
  10. CES - Silicones EuropeIn Healthcare, Silicones Are the Frontrunner. And That's a Good Thing!
  11. EU2017EEEuropean Space Week 2017 in Tallinn from November 3-9. Register Now!
  12. European Entrepreneurs CEA-PMEMobiliseSME Exchange Programme Open Doors for 400 Companies Across Europe

Latest News

  1. EU commission denies May 'begged for help' comments
  2. Interpol needs EU help to stop abuse
  3. Glyphosate protesters hold meeting with Commission
  4. Catalan MPs weigh independence declaration
  5. Russia used Interpol 'loophole' against EU activist
  6. Italian regions demand autonomy from Rome
  7. Populist victory puts Czech EU policy in doubt
  8. The mysterious German behind Orban's Russian deals

Stakeholders' Highlights

  1. CECEE-Privacy Regulation – Hands off M2M Communication!
  2. ILGA-EuropeHealth4LGBTI: Reducing Health Inequalities Experienced by LGBTI People
  3. EU2017EEEHealth: A Tool for More Equal Health
  4. Mission of China to the EUChina-EU Tourism a Key Driver for Job Creation and Enhanced Competitiveness
  5. CECENon-Harmonised Homologation of Mobile Machinery Costs € 90 Million per Year
  6. ILGA-EuropeMass Detention of Azeri LGBTI People - the LGBTI Community Urgently Needs Your Support
  7. European Free AllianceCatalans Have Won the Right to Have an Independent State
  8. ECR GroupBrexit: Delaying the Start of Negotiations Is Not a Solution
  9. EU2017EEPM Ratas in Poland: "We Enjoy the Fruits of European Cooperation Thanks to Solidarity"
  10. Mission of China to the EUChina and UK Discuss Deepening of Global Comprehensive Strategic Partnership
  11. European Healthy Lifestyle AllianceEHLA Joins Commissioners Navracsics, Andriukaitis and Hogan at EU Week of Sport
  12. Nordic Council of MinistersNordic Council Representative Office Opens in Brussels to Foster Better Cooperation